Privacy Policy

Last updated: 2026-10-27

Augmap, Inc. is a Delaware corporation based in Maine. This policy covers our websites, Trip Planner, AI-assistant integrations and land-trust mapping apps (the “Services”). It explains what we collect, why, and your choices. We do not sell your personal data or use it for advertising. Questions or requests: support@augmap.ai.

What we collect and why

Accounts

We collect your email to sign you in and send essential account notices. You can add a display name. For partner organizations, we record membership to control access to maps. We won’t use your name or organization in marketing without permission.

Trips and location

We store your destinations, stops, itinerary, map state, edit history and traveler brief so you can return to your trip and get relevant suggestions. Briefs and constraints are free text; avoid adding health details, government IDs or financial information.

Trips are private by default, except that anyone with an anonymous trip’s link can see and edit it. Anonymous trips and their session records are scheduled for deletion about 30 days after their last activity unless you claim them with an account.

Features that use your device’s location ask permission first. You can revoke permission in your device or browser settings and still use Augmap. Trip locations are places you choose to add. IP addresses can also indicate your approximate region.

AI assistants

Your assistant’s provider and settings govern your conversation, including any use for model training. This also applies to locally run agents that use hosted providers. We receive the tool requests your assistant sends us, which may include conversation excerpts, and store trip information it submits. Requests also pass through operational logs.

WorkOS manages access for assistants connected to your account and holds your email and Augmap account ID. View or disconnect assistants under Account → Connected apps.

We don’t train models on traveler briefs. Our AI inference providers, Cloudflare Workers AI and Amazon Bedrock, operate under terms prohibiting training on customer data. We run our own place search and route-planning software and may train search and recommendation models on de-identified trip-building signals, as described below.

Community content

Trail and property contributions are visible to your organization and, if it chooses, the public. Board recommendations are visible to board members; reviews, ratings and comments are visible to other users. Content is attributed as submitted.

We use contributions for place summaries, rankings, search indexes and recommendation models under the license in our Terms of Service. After account deletion, contributions remain with account identification removed. Email us to remove a contribution itself; aggregates that no longer identify you may remain.

Website interactions

We use PostHog to understand and improve how Augmap is used. Technical analytics can include page and feature use, browser, operating system and IP address. We don’t share analytics with ad networks.

Optional analytics measures referrals, campaign labels, setup actions, maps created and opened, and active map time. With your permission, cookies link visits across augmap.ai and trip.augmap.ai. When signed in, activity can also be linked to your account, maps and connected assistants using coded identifiers. These identifiers link activity; they are not anonymous. Each shared-map visitor has a separate browser identifier.

Choose Allow or Decline in Privacy choices, where available. You can change your choice anytime and use Augmap either way. Global Privacy Control keeps optional analytics off. Withdrawing stops future optional browser events and clears analytics identifiers; it does not erase earlier events. Email us to request access or deletion.

Separately, we record map creation and assistant tool use for service operation, security and measurement. Records can include authentication type and coded account, connection and verified-app identifiers—not the app’s underlying AI model. A browser choice does not control requests made by an assistant outside that browser.

Optional analytics events exclude email, trip text, prompts, precise coordinates, full URLs, access keys and assistant conversations. We don’t use session recording or advertising pixels for this measurement.

Cookies and abuse prevention

First-party cookies and local storage keep you signed in and remember preferences. Optional analytics cookies store your choice, browser identifier, referral labels and coded account-link observation for up to 90 days from when set or renewed. Cookie expiry does not delete events already collected. We don’t use third-party advertising or tracking cookies, or track you across third-party websites. Blocking cookies may prevent sign-in. Unlike Global Privacy Control, the older “Do Not Track” setting does not change behavior.

Cloudflare Turnstile checks browser signals to protect forms from bots. We receive its assessment, not the underlying signals.

Support

We keep emails you send us, including your address, to respond and maintain support history.

Who receives data

These service providers help operate Augmap:

Provider Purpose
Supabase Database and authentication
WorkOS Connected-assistant sign-in (email and account ID)
Cloudflare Hosting, storage, delivery, anti-bot protection and Workers AI inference
Amazon Web Services Cloud infrastructure and Bedrock inference
Resend Sign-in codes and account notices
PostHog Product analytics

Augmap staff access trip content to operate, debug and improve the Services, provide support, investigate Terms violations or security incidents, or respond to legal process.

Booking links. Third-party booking sites have their own terms and privacy policies. We may earn a commission; links can identify Augmap as the referral source. We don’t send the booking site your name, email or trip details.

De-identified data. We use aggregated or de-identified trip-building signals, such as place-addition counts and places added to trips together, to improve maps and recommendations, train our search models and report usage. We may share or license de-identified summaries, rankings and trends with partners. These exclude raw contributions, trips and identifying data. We won’t re-identify this data and require recipients to make the same commitment.

Legal requests and business changes. We require legal process before disclosing data to governments and aim to notify you where allowed. If Augmap is acquired or merges, we’ll notify you. This policy continues to apply until you’re told about any new policy and given a chance to delete your data.

Your choices and rights

We offer these choices wherever you live:

Retention and security

Data How long we keep it
Anonymous trips and session records Scheduled for deletion about 30 days after last activity
Account data and claimed trips Until you delete them or your account
Community contributions Retained without account identification after account deletion
Consent and deletion records Retained as legal records
Support correspondence While useful for support; deleted on request
Analytics According to our analytics provider’s retention settings

Account deletion makes your product content inaccessible and removes it from active systems, subject to the exceptions above. Analytics requests are handled separately. Residual copies may remain in provider backups and logs until their normal purge cycles.

Data is encrypted in transit and by hosting providers at rest. Application access controls and database security policies restrict private data to authorized users. No system is perfectly secure.

International visitors and children

Augmap operates in the United States and primarily stores data there; content delivery is global. If you visit from elsewhere, your information is transferred to and stored in the United States.

The Services aren’t intended for children under 13. We don’t knowingly collect their data; contact us if you believe we have, and we’ll delete it.

Policy changes

For material changes, we’ll update the date above and give reasonable advance notice by email or in the product, except when legal or security needs require otherwise. Changes apply going forward. We retain each version; history is available on request.


Adapted from the Basecamp open-source policies, used under CC BY 4.0.